MAL-2025-166668 Malicious code in tadasdhi-nil-tesru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12be63015242c32ec1218c3ee912bd80186e22e86b20b921982c9f3c70164c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1021d19030761c915ab15a6177000a4d5547b3d27961a268d49bbe4d86b98d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150915 Malicious code in @miptaa02/reyua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35718d0b3da1196ab42857ea0935e4a38b96e7ebbdd453a21bd2be6f7421a9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168564 Malicious code in tealove-nokire35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08fe0cde285e6f2d81c10cc6053a7d73f7555e2519068d30fb36306edba8fc6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165882 Malicious code in shilang-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b719589bd9f639b59d54fbec73fdab44f4d5a3ecbc454144e8e7d69038e0360d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152500 Malicious code in alvira-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcb601da993146c49bb4177bfc6aa0ac295a3b1ac1d0f444858f442696b4f34d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165136 Malicious code in riyanto-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438df45741530ebb5b86303324ab2acf75dcf29e75bec08dcd5983c439ef3e0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152633 Malicious code in analusia-akfai-asuia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fee430d6e83ee61f2a7a29443dccca1b72252c907748a63256b1dabf2511b80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166368 Malicious code in sunden-udik-vaklkanmumba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa534bfed18769d79b44d031faf542f73ad2e35d708b0de0e8078be8d0740c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155795 Malicious code in huda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c22def7c9da8701bce9b48ef0c8d03ff082fb3462958eb5255f0e08a0119c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163624 Malicious code in nokire-zenitsu36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9a7f1315af53d8b41b48cc7419c820521c2ab8aa432689d30daa43f1386ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165590 Malicious code in saku-ai-upuasoanio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31794e611169a91339df02a4a30040782774064d1ab90588e66e076b03031cb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158024 Malicious code in layla-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745ca5b405dd3235a248750c3d0a5fcd0552a4aeec0e82e6f20c1804a3b34214 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163206 Malicious code in nokire-nana51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e207d919c84774059ffb00b1f14037fb9e573c9f2269cd759f4f8571f697d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152579 Malicious code in alvito-poke6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8805e3bafd074f822613e8c964c0918b538efc935134e6222fc989ff33409e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164376 Malicious code in poliaoz-aikk-alini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bf874421d4d49e57f032a7fd1b268c18bf9dcd64c83371cc05b66ced13a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155071 Malicious code in fi-bendera-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b8342faa04f417e6d1bef0757ff7b90625d040897aead88ed651231f1ad016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-express-buffer-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d80a167979bbebdf1747a6f8b1c3dd693c488a57b5fb438a0218ac2c54d051f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lyra-backend-spectron-webdriver-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa8744f950b29de6fb9bc5a67d5bcba756474741ce43ace4730cda738ab0fc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-non-blocking-tailwindcss-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33396657f5384602f59413815c4af7e4d938c74186c2d4237be99c415508d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...